Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/In5a058jiz4_lFdMRA1YAO5upWI.roa
File: In5a058jiz4_lFdMRA1YAO5upWI.roa (raw, json)
Hash identifier: gZZd9sSv/P6mDkr914Plrtz+0eGChqMObEYXk/TeIT4=
Subject key identifier: 22:7E:5A:D3:9F:23:8B:3E:3F:94:57:4C:44:0D:58:00:EE:6E:A5:62
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 019427B695CE43ED8A40B00C075C8C2FFF56
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/In5a058jiz4_lFdMRA1YAO5upWI.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 104.247.170.0/24 maxlen: 24
104.247.171.0/24 maxlen: 24
104.247.172.0/24 maxlen: 24
104.247.174.0/24 maxlen: 24
104.247.175.0/24 maxlen: 24
104.247.176.0/24 maxlen: 24
104.247.177.0/24 maxlen: 24
104.247.178.0/24 maxlen: 24
104.247.179.0/24 maxlen: 24
104.247.180.0/24 maxlen: 24
104.247.181.0/24 maxlen: 24
104.247.182.0/24 maxlen: 24
104.247.184.0/24 maxlen: 24
104.247.185.0/24 maxlen: 24
104.247.186.0/24 maxlen: 24
104.247.187.0/24 maxlen: 24
104.247.188.0/24 maxlen: 24
104.247.189.0/24 maxlen: 24
104.247.190.0/24 maxlen: 24
185.73.128.0/22 maxlen: 24
185.137.215.0/24 maxlen: 24
2a03:a5a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:95:ce:43:ed:8a:40:b0:0c:07:5c:8c:2f:ff:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227e5ad39f238b3e3f94574c440d5800ee6ea562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:94:03:6f:ce:01:e0:1c:40:5f:13:10:8b:
d4:46:ce:a9:98:0c:35:f1:da:d1:17:6f:9d:ed:98:
60:29:ac:1e:b6:47:fc:f4:89:ee:a6:8e:24:4b:25:
09:e1:1d:e2:ae:35:d3:fe:c9:31:2d:63:c7:fe:6b:
ed:53:a3:2d:bf:e6:e8:dc:97:b0:04:35:8f:b2:2f:
5a:c1:03:ee:89:c9:2f:f2:97:51:f0:60:c1:c4:5b:
e0:8e:74:01:53:ce:9d:88:58:67:7c:c3:8e:3d:55:
0f:47:ab:4d:3e:fa:b1:02:26:16:18:b7:5f:7f:46:
17:db:9e:c5:0c:16:5a:05:f7:b2:de:82:fb:50:e7:
20:ed:12:0e:a5:66:8e:78:3b:1a:00:36:eb:9b:7b:
c3:51:7a:ab:5e:cd:cb:90:52:dd:af:6c:2e:a1:64:
ca:8b:e0:da:8c:91:fb:57:01:bb:66:e5:f6:33:cc:
a2:5f:44:49:c6:0b:13:65:0d:7d:4d:b9:b7:9f:d6:
d5:ef:78:ad:a9:85:83:96:c5:0a:82:3d:b8:49:89:
01:e6:2d:c9:35:b3:63:ba:7c:82:3b:8f:1c:7a:02:
c0:2f:f6:c3:93:7e:e4:42:a0:e8:49:e7:42:b6:29:
74:e1:0b:1a:ec:0a:b2:84:87:5c:84:64:c7:c0:59:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:5A:D3:9F:23:8B:3E:3F:94:57:4C:44:0D:58:00:EE:6E:A5:62
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/In5a058jiz4_lFdMRA1YAO5upWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.170.0-104.247.172.255
104.247.174.0-104.247.182.255
104.247.184.0-104.247.190.255
185.73.128.0/22
185.137.215.0/24
IPv6:
2a03:a5a0::/32
Signature Algorithm: sha256WithRSAEncryption
59:db:6c:0b:b1:d5:f0:6e:b4:6a:d0:21:83:cb:63:b5:b6:69:
85:09:ca:26:d4:7d:c5:83:89:f7:aa:6f:9e:80:50:1c:72:0e:
00:9d:02:b9:b7:c9:ca:5e:d3:a4:6b:44:d3:ff:29:4a:ab:a2:
84:34:0f:e9:b0:9c:28:03:7b:07:1c:4a:67:e6:8b:eb:03:b2:
fc:d7:2b:55:1f:54:f1:1d:38:b0:80:70:63:d8:c5:32:2a:a7:
f1:42:a8:06:2a:78:35:ac:89:e3:1a:3d:cf:86:99:05:a2:16:
26:6b:71:4e:aa:23:1c:99:21:49:96:ef:dd:11:8e:7e:7f:13:
ea:78:e4:02:98:44:7e:b1:6e:96:ba:f5:e8:f3:58:03:20:f3:
99:fd:90:4f:72:50:35:49:54:41:0b:38:df:17:1d:12:29:64:
82:35:c4:cb:a7:7d:d7:a1:6e:9c:0f:9f:2b:10:43:9e:b9:5d:
e7:e8:4a:62:89:e3:25:6d:19:40:5b:ab:8c:42:a0:8c:84:58:
7d:e0:30:f9:71:e7:98:0b:5f:e8:c6:37:cd:76:3b:96:d6:31:
62:5a:87:ba:30:eb:27:d0:ef:c7:2d:2a:47:e9:96:b2:32:d1:
59:36:d0:9a:26:fd:8b:21:a4:f7:4d:0a:77:08:9d:c9:7a:e8:
98:74:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:00 2025 by rpki-client